1bbe6c28b15c3462ce487041782c15b95036ef263a4bc29db8f696816cc6d199

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/09/2026, 00:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_1bbe6c28b15c3462ce487041782c15b95036ef263a4bc29db8f696816cc6d199.html
Size 609KB
Sample260913-bb2atsda84
SHA256 1bbe6c28b15c3462ce487041782c15b95036ef263a4bc29db8f696816cc6d199
MD5 f87e3330b9ac6dd2ac56ebb646491679
SHA1 4a337848257b38ae082d74bc49fe7401effc903a
SHA512 23705f76df8cd1e396404f1dd758c76222abfd33625997acd489e70e0c7b0b0dfb05ca1c473f94c1eb1136ed4b7573c4e5899bbe2809b7b5e032e8ad21b8a9f2
SSDEEP 3072:GreBby+gJvwNMgWjzVepN8CWxxW71itCX5aj9Nu/XtcBvY5JTYVakmKE+iu4q7Lc:GCPibLWN8CiNu/XtcBvYXToaqLi
TLSH
T138D40873632C933AA50B0788D57E29DA32D5C0D7E291D2ECF3FBA910C245CF552A9B58
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
984	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338385781117696"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-524788801-3318743092-4051225893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{42B29DA1-61F6-4158-B19E-C2D16CC31CA5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3688	msedge.exe
3688	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 5020 wrote to memory of 4952	5020	msedge.exe	85
PID 5020 wrote to memory of 984	5020	msedge.exe	86
PID 5020 wrote to memory of 3340	5020	msedge.exe	87
PID 5020 wrote to memory of 2260	5020	msedge.exe	88
PID 5020 wrote to memory of 3340	5020	msedge.exe	87
PID 5020 wrote to memory of 3340	5020	msedge.exe	87
PID 5020 wrote to memory of 2260	5020	msedge.exe	88
PID 5020 wrote to memory of 4800	5020	msedge.exe	89
PID 5020 wrote to memory of 4800	5020	msedge.exe	89
PID 5020 wrote to memory of 4800	5020	msedge.exe	89
PID 5020 wrote to memory of 4920	5020	msedge.exe	90
PID 5020 wrote to memory of 4920	5020	msedge.exe	90
PID 5020 wrote to memory of 4920	5020	msedge.exe	90
PID 5020 wrote to memory of 2124	5020	msedge.exe	91
PID 5020 wrote to memory of 2124	5020	msedge.exe	91
PID 5020 wrote to memory of 5100	5020	msedge.exe	92
PID 5020 wrote to memory of 2124	5020	msedge.exe	91
PID 5020 wrote to memory of 5100	5020	msedge.exe	92
PID 5020 wrote to memory of 5100	5020	msedge.exe	92
PID 5020 wrote to memory of 1008	5020	msedge.exe	97
PID 5020 wrote to memory of 1396	5020	msedge.exe	98
PID 5020 wrote to memory of 1008	5020	msedge.exe	97
PID 5020 wrote to memory of 1396	5020	msedge.exe	98
PID 5020 wrote to memory of 4996	5020	msedge.exe	100
PID 5020 wrote to memory of 3188	5020	msedge.exe	103
PID 5020 wrote to memory of 3188	5020	msedge.exe	103
PID 5020 wrote to memory of 3188	5020	msedge.exe	103
PID 5020 wrote to memory of 4224	5020	msedge.exe	107
PID 5020 wrote to memory of 4340	5020	msedge.exe	108
PID 5020 wrote to memory of 4356	5020	msedge.exe	109
PID 5020 wrote to memory of 3776	5020	msedge.exe	110
PID 5020 wrote to memory of 3776	5020	msedge.exe	110
PID 5020 wrote to memory of 4020	5020	msedge.exe	111
PID 5020 wrote to memory of 4020	5020	msedge.exe	111
PID 5020 wrote to memory of 3688	5020	msedge.exe	112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_1bbe6c28b15c3462ce487041782c15b95036ef263a4bc29db8f696816cc6d199.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffffceac188,0x7ffffceac194,0x7ffffceac1a0
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,7215999817181155395,8273608580489382809,524288 --field-trial-handle=2716,i,14367889539349276438,2818391079605334713,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:3
  2⤵
  - System Time Discovery
  PID:984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,2291390415466386711,13883899120616601437,262144 --field-trial-handle=2716,i,14367889539349276438,2818391079605334713,262144 --variations-seed-version --mojo-platform-channel-handle=2712 /prefetch:2
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2336,i,9576185756098584289,8418631218456510109,524288 --field-trial-handle=2716,i,14367889539349276438,2818391079605334713,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,2126958676262165748,1624118053868397683,2097152 --field-trial-handle=2716,i,14367889539349276438,2818391079605334713,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,14202017583021034426,18257020669040891362,2097152 --field-trial-handle=2716,i,14367889539349276438,2818391079605334713,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,4927012601485259353,4122715978349292163,2097152 --field-trial-handle=2716,i,14367889539349276438,2818391079605334713,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,7704344030525660119,17206934144271588828,2097152 --field-trial-handle=2716,i,14367889539349276438,2818391079605334713,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,1210986496443429900,13706012422671869298,524288 --field-trial-handle=2716,i,14367889539349276438,2818391079605334713,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:1008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,8679479265773047281,6193016143305019437,524288 --field-trial-handle=2716,i,14367889539349276438,2818391079605334713,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,4935395458769742430,957750167345750106,524288 --field-trial-handle=2716,i,14367889539349276438,2818391079605334713,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,4935395458769742430,957750167345750106,524288 --field-trial-handle=2716,i,14367889539349276438,2818391079605334713,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=2348,i,6764537328949437982,13088817774233101966,2097152 --field-trial-handle=2716,i,14367889539349276438,2818391079605334713,262144 --variations-seed-version --mojo-platform-channel-handle=4668 /prefetch:1
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,16921581511919934447,4573464083737571418,524288 --field-trial-handle=2716,i,14367889539349276438,2818391079605334713,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:8
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3700,i,11759239678187780598,8089715222131009368,524288 --field-trial-handle=2716,i,14367889539349276438,2818391079605334713,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:8
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4408,i,16355883174650380673,15888271615309319178,524288 --field-trial-handle=2716,i,14367889539349276438,2818391079605334713,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6444,i,2946365759195059985,15018037648702400333,524288 --field-trial-handle=2716,i,14367889539349276438,2818391079605334713,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:8
  2⤵
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2584,i,301378553869061559,10636929224880495533,524288 --field-trial-handle=2716,i,14367889539349276438,2818391079605334713,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:8
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5304,i,8282366827865316347,17212175855889152500,262144 --field-trial-handle=2716,i,14367889539349276438,2818391079605334713,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3688

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4352

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:540

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 6fa1b02b96b249c932f11a4c4f1eb52f042c98bf33d02c325fd422f437c15214
MD5 dab629217416704f76a79a88ad8104e7
SHA1 7976f0ba766ba9c277031e8bb5fb53af02fda376
SHA512 08718b5a2794b585eb95d2cba2f1738b354033d24a471097fdf4f83b9cfe6ba984c2b3c4dae177b4e601dc47eb8b72225f8677ed39d32449fb3f874f22b26d8d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7+:fwUQC5VwBIiElEd2K57P7+
TLSH
T1C1B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f6bff0f027b4593220ead05713bffd7b3d5423f6191a2524fd76dd83ff0eb23f
MD5 30591b0f3de624921162fd3a45ebe21b
SHA1 1875648c4ccd30a3e9006368fd4fa2368d87828f
SHA512 597d1be49f44efaefee912dc403509ac948d2981ce2a8c8038290e6f3e098f8b373930b866b23d4fd25432dcc9ac6f1d6e1bb26298fd76bf73c91db3821a921c
TLSH
T108D02BF899C80510C08230792137824133D9E6108103200990E107040C103A31200460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ef3b734c787633afe5b1c08a8ef08bde9d8879f31c826caf2e652aa614df86d
MD5 f6bf3c2e07439d9cb62d723d60e7ac3a
SHA1 572358d019a9f66b124eee416f35ea7195ac64bd
SHA512 f50fcdc5af36ec0684d7e4bcb343b9b713dea31b4539d18b949e37972279e41e6475068981ccee1ded1bb56eabade7faecbd57382d87939c090e6bc1fe3826cc
TLSH
T1CDD02BF859C80910C48230792136824133D9E6108103210A90E107040C113E31200460
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 0be177f7479a4f8aff2361cf9a97b173ba3b9f73aa3f3b069c590a2103b17fb1
MD5 131af7c0b6947b0caea44272c328fd2b
SHA1 d93b520a36a87176ce90b39111b4352517516c54
SHA512 ad0a66344539e5ecfb0b4c5ad420cbbf0573b37f127c966feeb539025ac97886151eb182577db7f31b161cebf8afa77961feb36e14b1d89d7cfc279fef2be3c1
TLSH
T17C71E590D6D1C399FFBFE8715BD532EF3A6CC4D604877D1203A8DA79A84EB19821A0C4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f6adddc03ad0f87940707a1efb2833f55543a94a8633ed353f919f1070d75bd6
MD5 c803eb1c151e82b5042961d0511993e8
SHA1 125abbd06b40be9b6b09663ac17cd6e10a9055c1
SHA512 b10d89291338deee2cbcac61681cacd5020c448f6da70234ec838ac58c9918a1f4e316b140b344d250193dfef154f84fd40ac7b4ef8bae8770fd88f20c3c5903
TLSH
T11161D490D6D1C365FFBFD8719B9532EF3A6CC9D204877D1243A8DB78A84EB1982150C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58fa97.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fa97.TMP
Size 3KB
SHA256 c8293b0571b7c4c2ab47d66c50c10f51437c6c368b775a2e3350c05c6707bbff
MD5 4e0c2eacfba766f13beb54348b77bdf5
SHA1 506e8dbc8f0105229daa99e3b65118b2bcf95bc3
SHA512 6a0720f6851d16815704f1630d358041f742026d6c287c9ba17788973b4c2d5462dd424ca0548b158fa89352223d067f4f7cb7d31b15b5b034d97b53895aecb1
TLSH
T1F461D590D6D1C365FFBFD8719B9532EF3A6CC9D204877D1243A8DB78A84EB4982150C4
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

192d6a8b-100c-42b1-9946-57711e79be89.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\192d6a8b-100c-42b1-9946-57711e79be89.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 827678a136237eb400c78259e63b315148ae4b269a6612be609771dcdfcac6af
MD5 e04d929cfee30540befe9409d210760d
SHA1 cc38306b2a3ac3b029fb35097c4cbec3dc317406
SHA512 01eac50063a9bc7c674b08731ab77b63be75e9dfe9afb20cdf6b844b4832d389a184b259ad35ef3644648ef259bf7e39ece3761e2d55c38c6e7a0cc48af67902
SSDEEP 96:DBOtVKdVXFIFEe3zBUN5oHhwrxXXEfpDTuOwQ:D0jKTXF/e31UN+HhwrxX0fpDTTT
TLSH
T1178159B6C3D887BE882256F05A257E2ADC1D055B42283C6689F9EF4F63F1471D20369F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 34a21b849bc5377f19bbdeec2eaa62ee2f891920f169ea5303422b4a02a0e8b9
MD5 bb0d4d3335a0d1ba4f6aa139dbe62fd2
SHA1 d31ad0658904458774a25e2d14d986c4a30a857e
SHA512 b868d753f6151cf339c9d0a30fb3ddc8fe2b5b39629fbb686062fc16ed06edb15ebd938a19d8d70f85ff83b95c2edb5532ff3ec3aa0a8ca09ac5c7aef3f2fa47
SSDEEP 192:sxZJRfWx/fWs6LZIdpdgHW6+WNGYRPR80IgrJ:sxZJ8x/fWsky6HbGmH9
TLSH
T1BC22B8166E38A57B8CCBE31DBA25BF53D6F95032A1951E88AAFC861C04E76DD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 c26e29c7b77d03ad88228defc45a92635c131fc7a2764372ca04867c1dc83d01
MD5 eaa85b3a876e5d599d506f69941275bb
SHA1 0575d12d2bf22a94c6acb13e061e10fdf3b98e09
SHA512 aaa7f69bda626b29e99131231cb6883c553e1de585ebd460166c31f7110d7389d85c409aba29722d4c7cac63f81f31c167d3b716d824771cb8f61c868144beca
SSDEEP 192:sxZJRfWx/fWswNZIdpdgHW6+WNGYRPV80Ig5eJ:sxZJ8x/fWsAy6HbGmrQ
TLSH
T1D022C9167E28A57B8CCBE30DBA15BF53E6F95032A1951E48A6FC861C05E7ACD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 459fa97dd167e3872b80bd240c9d7ce2e4c4f86ce7b6b52d5c7bbc4bff7ec580
MD5 836fef8e11f3954c3c01dfa0b4b4db5f
SHA1 99f90bd169b37fa8a7d567f303e567767d2a5ee4
SHA512 9bd6f13052fef8b0ce4ad237ef8bc7b571138b45e7078b302e5c4f16281c227faf1953fcd89f10715bfccfab10fdb30238eed61774b8ab5d14a47ca94a9c7005
SSDEEP 192:sxZJRfWx/fWswNZIdpHgHW6+WNGYRPO80Ig5eJ:sxZJ8x/fWsAyAHbGmKQ
TLSH
T10522C8566E28A57B8CCBE30DFA15BF53E6F95032A2911E48A6FC861C05E7ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 be1904c12b26b7df8d72cde13558655fe99b5e1d0cabd62253e0050ec29cdf68
MD5 4f7551516e709f7615b74debcbfcd03f
SHA1 069335345c358b2981a776598864c49dbead9d5d
SHA512 04d9d0a018dc20a1432316c69dddd0990fb289777d6d8a33595c76db68fca16a5ce1ec37e49cbd0bafbcbeb0b60792a5302a0195319a74c2add4fa9027aca43e
SSDEEP 192:sxZJRfWx/fWswLZIdpdgHW6+WNGYRPR80Ig5sJ:sxZJ8x/fWsSy6HbGmHS
TLSH
T12A22B7166E38A57B8CCBE31DBA55BF53D6FD5032A1951E88AAFC861C04E76CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 abab6b5ee0176dc34b0feee09634df29c902392b55daf52ab7569df8e8007abc
MD5 90d2f8cb000517d81fb2eebd77340bc6
SHA1 f093e222a69b1bc4dabd83dc3a152b86a7d66fee
SHA512 5827fb5e6e4c4816499f268f98d20ded58bf29b34e82bbb16bdaefc3ca8303bcac37605c7b7d14aeedcca46c0807b98e7de5c8b149a3393435dbff1469ad6ceb
SSDEEP 768:V5K9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3GroM+YP:V5K9uzYWvcQWsu1ja0HL7Q39M+YP
TLSH
T13AC20A3F640CCB7E5FC01A9DDC5A6F973E9802D7A6688D4047FA944C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 4c0da556276bed3700416a18f245a8a99fe489460afb3b2f49c33096f7f8c9b1
MD5 86941e2f13764b47e9b6aefe4228b351
SHA1 dd536eb8d1b8a7a2bd611acf47f04306dd58cf12
SHA512 4ede7dd391a4fa1b656560641b1bd0fcb1525730ef93c770529ec1f3043c4ff2585e6802820580846650fa10b5c2d85f49a3f3fe8c81a3fa93fff6169e1467a4
SSDEEP 48:K0mImmBcAeEE9bI/wISY9K981+9xWtYXoEPyLZo1JTXrEbXyvIShEK9h1LExpUYW:K0m9luKuMjqiAKTaS27MKbCn
TLSH
T1D7A1295434BB0654B8BE255881B5872E469175B33558EA3BBFBC406A8E2FE080DFE4CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 65B
SHA256 26e78cb8e189406e12ca36d7fe0eee3d0757dcb21dd8c84917e09c50bff3b708
MD5 f012cdf7eed009b6531e662c6b34787d
SHA1 b0cf0127db406b6184aa1230ceaef87f6d0f7c01
SHA512 89ab98a58175d02e277f293cd9cd021d3dffd012d12bd15f4163b6a90216d6bc3fabeaf18fbefb17b9d007eb734624065a9ce52fa418ee5216d4250c588573f0
TLSH
T1ADA002B70911818B6F30A9D82135A21EF80FC3CC8CC0CEF4D049C0432128A334052491
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe590517.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe590517.TMP
Size 149B
SHA256 0102537ee351bf1335917b6e31176114e6d5cafaf763b9211f6e4af27d7432cb
MD5 aa95433c752e5de3c6f09adb6a59d777
SHA1 d7dc1116f538db421a5428542aff5558a22b60ec
SHA512 0b5564c936ae03187335466b51feb865b6845e37ba6d9288ffe01e95e9fadb2e715f78642c1654cf2f46c682146c6baeee7f37e48e3c3c63ff67ad78f0353551
TLSH
T150C02B9B03318A0B2730ECE91832504DE43BDECD9DC7C9F8C006F082217C312C019972
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59961c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59961c.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 d57f7c730d6cd16021ff527d8cbbcf72a64fa054baed1bec227461550a4f33df
MD5 da7001f5129e57767b760aeb04d2ee3a
SHA1 6b96713cecdfe7f63033d8dc8455cd1aab00d7aa
SHA512 671f5741c94a8fd7ffe4fe9d1b6d580947810c4a1c3660ff82bc8afeb1d712baf70f7241c9ea772d7b5172040f978463d23f9b62a67a980927efc2fd508adec1
SSDEEP 192:u4AsNcPQ/EnJmsxwxVQmiU1MTMBEj4OjTVgmiOyR0PjEjuFJSJr8/DsZzy/JU8:esNcPwpRygB/OjTV9iOyGPjEjywJr8/H
TLSH
T11832083568686C7B9CA7A245F48B3613DFB84167DA483FD0D2DC5E0D01DB6AC234B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 9796ecd3a88025387715757d47fbe9cf953df04f74b498a0dadf7d06ed0b0c9c
MD5 98be0dc1431efa3d721f277d3d85077f
SHA1 f81dfae853c4bab571fb491c955a48ed54aa5302
SHA512 6985745c0f984e631105b9006accd1829bea51ed771cb5379c0a0880f2128d46de508f8079d8329d609f673a7bbed8ba54e7b9a6a33d21abd04b339c4fd91ab6
SSDEEP 384:LiFiZcIdYsNU8TUNTUlIl7fwpRygB/OjTV9iOyGPjEjywJr8/pG7O6R2Feozh7UT:mFQm5wgV3gBGn2OYjZhKpG7TRO2L
TLSH
T187A26C725CA48D7BADBBA646F94A3213DEF840A3D6856E90E2DC5F0E0097698134BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ed9fee36ce9e3ebb19e6649a689169092eb5f91c0eee2f3a7987cd1e6a8684d4
MD5 2f59b606f440ddcdf979f48c298149a4
SHA1 88fad861ce92c5cfc33df65f5c80667624677e37
SHA512 8ae6a5de2805d39b26919ce2864392116d158ef6993f3c13ba74136327bd8515397e0ad24a7a3c4e1216e7f629ad1c1ecf95ed2e2143b2d4a2021b924bf2312f
SSDEEP 192:SONK6ygpQmiUyMkMftOCTVgmiOyR0P5zPzQ8U6:SONK6lHHxftOCTV9iOyGPVhU6
TLSH
T17702E834AC782CBB8DB3AE05F88B37179FA4116BE9552F84DAD81E1C01D765C2306C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 8ceaada8781e434e24d6890aee7754d553785606630c974bc544fc3c57ae0f2c
MD5 778b4ac90e7910b1ecbf74f40a373330
SHA1 926f50d315eabf056b96fad3ed7aea4a42267a8e
SHA512 ca367dabcdd52498dfab94e0c8f8347111b6f894d372f7207d9b22a339fd2e47d30680314005c4665a493a92449a19e7db82a5137e0ddd78b11d5724fafbbe9a
SSDEEP 192:u4AsNcPQ/EnJmsxwx6QmiU1MTMdEj4OjTVgmiOyR0PjEjuFJSJr8/DsZzy/JU8:esNcPwpoygd/OjTV9iOyGPjEjywJr8/H
TLSH
T15332093568686C7B5CA7A245F48B36139FB44167DA483FD0D2DC2F0D01DB6AC234B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 600b897d17eb62811ceddbd43f57fa577799bed9277270fe68a20ecf0f217aa6
MD5 98aa6e27c6fe2a3e04bcf76cc54ddaf0
SHA1 69cc18a2c4b35e472e2b3321812a420ff89bfeb7
SHA512 f65a4bee980a3db739fbcdd46ba31e38b3b1a4494bc181da7168b36320b8cdef5f9d4aab3fb3cc8ff81875b4730822c9dd7f90f97577c7195e5b165f2bcee5d3
SSDEEP 192:SONN6yTQmiUyMiMfEcOCTVgmiOyR0PjEjuFJSJr8/V3Uzy/JU6:SONN6OHvfdOCTV9iOyGPjEjywJr8/WG5
TLSH
T127121A35B8286C7B5DA3B545F48736139EA48167EA493FC0D5DC2F1C01EBAAC234AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 bab08bb21864b222695af99f2e47a6956bbee3a75e90d2a592fcc211d1fc1d94
MD5 a30fb32775038e4a512e51fd07846bf6
SHA1 2cb7d2f6c33820ee0e71f4165c98f9b72d1a2fc7
SHA512 6cf62b753afda6d2540966cd2e4fb33ef32edfe1985280f8219db89e8b56e42269bab3f767419d3ff2fb1635d8e04914b84c269f114a5bba1a123ce140d7755c
SSDEEP 384:hZcIqsNc7fwpRygB/OjTV9iOyGPjEjywJr8/sG7O6R2Feozh7Uvo0:pq73gBGn2OYjZhKsG7TRO2L
TLSH
T17E827D716C745C775CABE246F84A36179EF880A7D7892FD0D1DC6F1E00DAAA8130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 91856aaea6f2c3ae9c29eec8ac06b126b8480191e1d80a3980ab5ff30c888b6d
MD5 d70e323dc69d1df05372b8b27d9bf7b3
SHA1 f9ce1306bde1c587140cbd159dfd9b238204f66a
SHA512 044191d4817c537a73710536b817b64b7da47bd1fcafac0a73fb32d903b133544db6c2c6cc863d806edb4d9d67f6546175dddf8ff8898c0bd035ac269e0602c1
TLSH
T1CE41395CAAEA1148B3776E6A5BF7686D947BB9773E06D49E00010D4F0622B40D8B2B37
MD5 SHA1 SHA512 TLSH

Submit Download